Last Update: 06/03/2026 at 5:25 AM EST

Connecticut privacy enforcement and bill expansion

Coverage from Kelley Drye & Warren LLP, WSHU, and others

Articles

13

Latest Article

05/27

Active Days

118

Executive Summary

The cluster is centered on Connecticut's privacy regime tightening through both enforcement reporting and active legislation. The dominant current signal is a move from baseline CTDPA implementation toward more specific compliance pressure on breach notifications, data-rights handling, opt-out enforcement, data broker practices, and sensitive-data restrictions. The strongest recent development is SB 4, which expands consumer control over broker-held data and limits geolocation, facial recognition, and surveillance pricing uses. The broader pattern is a state-level privacy escalation with recurring emphasis on operational compliance, consumer deletion rights, and protections for minors and genetic data.

Connecticut privacy enforcement and bill expansion topic image

Key Points

  • Connecticut AG enforcement report becomes a key reference point for current privacy expectations.
  • Breach notifications, delayed disclosure, and warning letters are a major enforcement theme.
  • SB 4 advances through the legislature and expands controls on data brokers and sensitive data.
  • Facial recognition, geolocation data, and surveillance pricing are recurring regulatory targets.
  • Genetic and DNA privacy appear as narrower but important extensions of the same privacy framework.
  • Business concerns center on compliance burden, scope, and technical feasibility.

Featured Article

FPF / Megan McCollum05-27-2026
Connecticut signed SB 4 on May 27, expanding CTDPA deletion rights, creating a data broker registry, restricting surveillance pricing, and adding direct-to-consumer genetic testing protections.

Coverage Timeline: 118 Days

Jan 30Feb 20Mar 13Apr 10May 1May 22

Additional Articles

⭐⭐⭐⭐⭐

Kelley Drye & Warren LLP03-02-2026
Connecticut Attorney General in 2025 enforces CTDPA focusing on data rights requests, breach notices, and opt-out signals in Connecticut.
WSHU / Jeniece Roman02-06-2026
Connecticut Attorney General William Tong announces 1800 breach notifications in 2025 and seeks tighter privacy laws in Connecticut.
Mediapost / Wendy Davis05-05-2026
Connecticut passed SB 4 on precise geolocation, surveillance pricing, facial recognition, and one-click data broker deletion, pending Governor Ned Lamont action.
JNS.org / Debra Flax02-18-2026
Connecticut lawmakers discuss dna privacy protections after the 23andMe breach.
HealthMatch05-12-2026
Privacy notice supplement for Colorado, Connecticut, Maryland, Nebraska, New Jersey, Nevada, Texas, and Washington describes rights to access, delete, and opt out of sale and targeted advertising, with state-specific health-data authorization rules.

⭐⭐⭐

IAPP.org / Joe Duball01-01-1900
Connecticut, Florida, South Carolina and Minnesota advanced enforcement and new privacy rules in 2025, focusing on deletion rights, children's privacy, foreign-adversary risks, and AI retention.
Inside Privacy02-19-2026
Connecticut Attorney General reports 2025 CTDPA enforcement actions on breach notices, opt-out rights, and chatbots.
Meyka / Danny Kontos02-18-2026
US states and attorney generals tighten privacy rules in 2024 across the United States including Massachusetts.
CT Mirror04-23-2026
Connecticut Senate passed S.B. 4 in 2024 to regulate data brokers, add a deletion system, and provide protections for genetic and biological data.
CT Mirror05-04-2026
Connecticut House passed Senate Bill 4 in 2020s, regulating data brokers and adding consumer data deletion and restrictions on geolocation and facial recognition for Gov. Ned Lamont review.
CBIA / Joe Budd03-27-2026
CBIA opposed several Connecticut committee bills in 2026 that would expand employer privacy and cybersecurity duties, including data broker controls, geolocation limits, and massive-breach forensic reporting.

⭐️⭐️

Kelley Drye & Warren LLP03-08-2026
Connecticut Attorney General William Tong released the 2025 Connecticut Data Privacy Act enforcement report, outlining privacy enforcement activity and business compliance expectations in Connecticut.